CWP login.php Unauthenticated RCE

Control Web Panel versions use exploit/linux/http/controlwebpanellogincmdexec msf exploitcontrolwebpanellogincmdexec show targets ...targets... msf exploitcontrolwebpanellogincmdexec set TARGET msf exploitcontrolwebpanellogincmdexec show options ...show and set options... msf...

GHSA-C6RX-GXQV-VR5J nemo-appium vulnerable to OS Command Injection

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...

nemo-appium vulnerable to OS Command Injection

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...

Control Web Panel Unauthenticated Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/stopwatch' class MetasploitModule 'CWP login.php Unauthenticated RCE', 'Description' = %q Control Web Panel versions 'Spencer McIntyre', metasploit module...

CVE-2022-42484

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-42484

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-42484

CVE-2022-42484 affects FreshTomato 2022.5 in the httpd logs/view.cgi OS command injection. TALOS reports confirm an OS command injection vulnerability (and related directory traversal) that can trigger arbitrary code execution via crafted HTTP requests. Impact is remote command execution with web...

Siretta QUARTZ-GOLD OS Command Injection Vulnerability (CNVD-2023-17084)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to OS command injection, which can be exploited by attackers to cause arbitrary commands to be executed by sending crafted HTTP requests...

PT-2023-14122 · Unknown · Freshtomato

Name of the Vulnerable Software and Affected Versions: FreshTomato version 2022.5 Description: A specially crafted HTTP request can lead to arbitrary command execution due to an OS command injection vulnerability in the httpd logs/view.cgi functionality. This allows an attacker to send an HTTP...

CVE-2022-42490

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-40222

An OS command injection vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...

Vulnerability Spotlight: OS command injection, directory traversal and other vulnerabilities found in Siretta Quartz-Gold and FreshTomato

Francesco Benvenuto of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered several vulnerabilities in the Siretta Quartz-Gold router. Talos also discovered vulnerabilities in FreshTomato while investigating the Siretta router. The Siretta Quartz-Gold is an industrial...

CVE-2022-40969

CVE-2022-40969 (Siretta QUARTZ-GOLD) is a OS command injection vulnerability in the httpd delfile.cgi file-management endpoint. Talos reports that the delfile.cgi handler accepts a parameter named _filename, appends it to a base folder path, and then executes rm -rf / via system(), with the filen...

CVE-2022-40220

An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-40220

Cisco Talos details CVE-2022-40220: OS command injection in Siretta QUARTZ-GOLD G5.0.1.5-210720-141020 via httpd txt/restore.cgi. The vulnerability arises when nvram key/value lines from the request body are parsed and fed to system() without validation, enabling arbitrary command execution. TALO...

CVE-2022-38066

CVE-2022-38066 is an OS command injection in Siretta QUARTZ-GOLD’s httpd SNMP feature. Talos reports a vulnerability in QUARTZ-GOLD G5.0.1.5-210720-141020 where the SNMP daemon reads custom OIDs that map to exec entries in /etc/snmpd.conf. An unauthenticated or authenticated attacker can trigger ...

CVE-2022-38066

An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...

CVE-2022-42492

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

CVE-2022-42493

The CVE-2022-42493 family affects Siretta QUARTZ-GOLD: the m2m binary can execute arbitrary OS commands via UDP-triggered paths (e.g., DOWNLOAD_INFO, M2M_CONFIG_SET, DOWNLOAD_CFG_FILE, DOWNLOAD_AD) through m2m_parse_router_config without input sanitization. TALOS-2022-1640 confirms several OS com...

CVE-2022-42493

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...